$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: rjbwcDgjEAQ8fEUUPF491SwRe+pZcy8+1F7JgSz+360= Subject key identifier: 36:54:7A:AE:EC:21:9D:39:D4:64:78:C7:4B:6A:A6:EA:52:5A:D1:40 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 6B613C334ABB29E2DA5EF9CD3D95A25D6AD5C43F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 0112 Signing time: Sat 28 Jun 2025 22:31:14 +0000 Manifest this update: Sat 28 Jun 2025 22:26:14 +0000 Manifest next update: Wed 02 Jul 2025 05:44:14 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: sxaPQ+ZqxnBrZjtGVRwER4T4gwZhUZTm3DzgPwkczhE=) 2: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: 0uV+mjw9F8EU8ahtirfTwURWcHK5W1OoxMQR2W5F+YQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:61:3c:33:4a:bb:29:e2:da:5e:f9:cd:3d:95:a2:5d:6a:d5:c4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Jun 28 22:26:14 2025 GMT Not After : Jul 2 05:44:14 2025 GMT Subject: CN=36547AAEEC219D39D46478C74B6AA6EA525AD140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:9d:64:59:f4:13:03:8b:86:01:99:30:49: 62:ba:5e:51:66:c4:27:93:21:f4:8a:6d:66:36:74: 85:28:fb:5e:96:c1:36:32:c2:69:c5:a3:f3:d8:d8: 87:af:78:78:40:71:cc:e7:08:b1:fc:c6:e0:cd:27: 8a:40:85:b4:37:86:01:39:96:13:12:b8:44:8b:76: ae:13:de:02:08:ad:b9:b6:33:f3:d8:67:2a:2a:78: d5:15:49:82:83:98:14:0a:09:00:1d:42:ba:22:fc: 4c:9a:88:45:e7:3c:57:fe:fd:74:20:b5:14:5f:72: b3:84:be:0a:50:34:a9:a5:2b:09:0b:a0:71:91:9c: 74:8c:8e:a5:89:ed:3e:fa:ce:67:be:58:75:b3:e2: 06:e9:9d:12:3b:09:90:0e:a7:7f:32:a9:b8:98:df: bb:a6:85:9b:09:8d:44:64:d3:26:83:b1:c0:da:a2: 4b:ca:00:cf:65:4e:06:ab:d6:f9:2a:4d:39:d9:aa: 82:ea:81:a6:55:d3:6d:44:1c:fe:5e:e7:57:9a:5e: 45:c3:3a:14:5f:0e:1c:c0:64:7f:6d:e6:d6:4f:ea: 6c:e5:67:06:5f:79:84:e7:26:d7:ad:0e:5f:62:b9: b7:94:83:43:51:18:ca:1d:80:8f:bf:77:a3:09:4c: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:7A:AE:EC:21:9D:39:D4:64:78:C7:4B:6A:A6:EA:52:5A:D1:40 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:ea:8a:91:23:f9:f5:42:8f:19:12:5c:b9:51:22:11:21:6f: e5:f7:03:67:53:c7:e2:03:55:60:0f:77:cd:f7:f9:ad:5c:41: 19:ee:86:96:16:88:b7:cf:9f:92:c2:53:47:dc:c2:9e:d2:37: c8:f4:fb:be:9f:09:9b:0c:b5:03:8f:73:22:8f:b8:d7:f1:fb: 93:21:ae:f4:e1:d6:d8:34:b6:2f:ae:ff:21:e3:2d:59:ad:7c: ae:ed:5e:34:ff:6a:18:59:d1:ee:0a:61:7e:ab:27:b3:7a:d5: e0:24:a3:a7:b5:7a:92:77:3d:e9:f9:29:49:43:12:fc:4c:5a: c8:9b:a7:a0:68:31:ff:e4:d1:f4:94:c0:e1:bd:fa:a3:63:e7: 59:c8:35:a0:dc:b5:fa:b2:7c:40:be:01:1a:5c:49:6e:3d:df: b8:dc:ac:77:bd:6f:92:d1:a7:6b:ba:c8:f8:dd:86:ac:2a:34: 25:22:20:58:9c:76:41:76:cd:c8:d3:a2:ac:c7:d2:68:7a:71: 66:d5:09:f6:f3:5f:8e:c2:36:0c:24:7b:df:a5:1e:0f:9c:a5: e0:6f:be:46:60:22:e7:67:cb:b8:9a:37:f9:c4:c6:be:b0:01: 03:f4:15:f0:9f:62:74:2d:74:2f:2d:20:40:02:ac:4e:2e:da: 52:df:85:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2E8M0q7KeLaXvnNPZWiXWrVxD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTA2MjgyMjI2MTRaFw0yNTA3MDIwNTQ0MTRaMDMxMTAvBgNV BAMTKDM2NTQ3QUFFRUMyMTlEMzlENDY0NzhDNzRCNkFBNkVBNTI1QUQxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ51kWfQTA4uGAZkwSWK6XlFm xCeTIfSKbWY2dIUo+16WwTYywmnFo/PY2IeveHhAccznCLH8xuDNJ4pAhbQ3hgE5 lhMSuESLdq4T3gIIrbm2M/PYZyoqeNUVSYKDmBQKCQAdQroi/EyaiEXnPFf+/XQg tRRfcrOEvgpQNKmlKwkLoHGRnHSMjqWJ7T76zme+WHWz4gbpnRI7CZAOp38yqbiY 37umhZsJjURk0yaDscDaokvKAM9lTgar1vkqTTnZqoLqgaZV021EHP5e51eaXkXD OhRfDhzAZH9t5tZP6mzlZwZfeYTnJtetDl9iubeUg0NRGModgI+/d6MJTLh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNlR6ruwhnTnUZHjHS2qm6lJa0UAwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPqipEj+fVCjxkSXLlRIhEhb+X3A2dTx+ID VWAPd833+a1cQRnuhpYWiLfPn5LCU0fcwp7SN8j0+76fCZsMtQOPcyKPuNfx+5Mh rvTh1tg0ti+u/yHjLVmtfK7tXjT/ahhZ0e4KYX6rJ7N61eAko6e1epJ3Pen5KUlD EvxMWsibp6BoMf/k0fSUwOG9+qNj51nINaDctfqyfEC+ARpcSW4937jcrHe9b5LR p2u6yPjdhqwqNCUiIFicdkF2zcjToqzH0mh6cWbVCfbzX47CNgwke9+lHg+cpeBv vkZgIudny7iaN/nExr6wAQP0FfCfYnQtdC8tIEACrE4u2lLfhWU= -----END CERTIFICATE-----Generated at Mon Jun 30 19:07:13 2025 by rpki-client